Skip to content
SPECIFICTION
Get listed

Wisec

wisec.io

From €82.50/mo Free plan WebWindowsmacOSLinuxAPISelf-hosted
Visit wisec.io
Spec score 8.0 #11 of 24 in Software Supply Chain Security Software

What it is

Wisec collects, signs, and preserves software build evidence for teams preparing for Cyber Resilience Act readiness. It links builds in a signed chain using Ed25519, SLSA provenance, and public Sigstore/Rekor timestamping. It generates signed CycloneDX SBOMs and VEX documents describing the exploitability status of detected CVEs. Eleven anomaly rules run on each build, covering project history and known-bad patterns. Teams can set CI gate policies to block or warn on secrets, vulnerable dependencies, unapproved contributors, risk thresholds, and CVE severity. Wisec supports GitLab CI, GitHub Actions, Jenkins, and Azure DevOps, and imports SARIF v2.1.0 findings from tools such as CodeQL, Semgrep, Snyk, and Trivy. It maps evidence to NIS2, SOC2, ISO 27001, and CRA and exports PDF reports; CRA and ISO 27001 mapping is not a conformity claim. The maker says data is encrypted in transit and at rest, hosted in France, and kept within the EU. Plans include Free at free, Business at €990 a year, and Pro at €2,990 a year.

Spec sheet

Purpose
Wisec collects, signs, and preserves software build evidence such as provenance, SBOM, SLSA, and VEX for Cyber Resilience Act readiness.Read 5 Oct 2026 · wisec.io
Support
Free includes community support, Business lists email support with a 48-hour response, Pro lists priority support with a 24-hour response, and Enterprise lists dedicated 24/7 priority support.Read 5 Oct 2026 · wisec.io
Headquarters
Saint-Priest, FranceRead 28 Sep 2026 · wisec.io
Anomaly detection
Eleven rules run on every build, including five calibrated to project history and six for known-bad patterns.Read 5 Oct 2026 · wisec.io
CI integrations
Dedicated CI/CD support is listed for GitLab CI, GitHub Actions, Jenkins, and Azure DevOps; CircleCI and Travis CI are described as coming soon.Read 5 Oct 2026 · wisec.io
Compliance evidence
Wisec maps evidence to NIS2, SOC2, ISO 27001, and CRA and can export audit-ready PDF reports; for CRA and ISO 27001 it says this is evidence mapping, not a conformity claim.Read 5 Oct 2026 · wisec.io
Cryptographic records
Builds are linked in a chain and signed with Ed25519, with SLSA provenance and public Sigstore/Rekor timestamping.Read 5 Oct 2026 · wisec.io
Open-source agent
The CI agent is open source under Apache-2.0, while the platform is managed and hosted in the EU.Read 5 Oct 2026 · wisec.io
Policy gate
Users can define block or warn policies for secrets, vulnerable dependencies, unapproved contributors, risk thresholds, and CVE severity, enforced at the CI gate.Read 5 Oct 2026 · wisec.io
SBOM and VEX
It generates signed CycloneDX SBOMs and signed VEX documents describing the exploitability status of detected CVEs.Read 5 Oct 2026 · wisec.io
Scanner imports
Wisec imports SARIF v2.1.0 findings from CodeQL, Semgrep, Snyk, Trivy, or other SARIF-compatible tools.Read 5 Oct 2026 · wisec.io
Security and residency
The maker says data is encrypted in transit and at rest, platform data is hosted in France, and data residency is 100% in the EU.Read 5 Oct 2026 · wisec.io
Self-hosting
Self-hosting is available to Enterprise customers, with on-premise or private cloud deployment listed.Read 5 Oct 2026 · wisec.io
Source code handling
Wisec says its agent runs in CI and does not clone repositories; since agent v1.2.0 it withholds scanner-quoted code before sending findings.Read 5 Oct 2026 · wisec.io
Target users
The Free plan is described for small projects and security exploration, Business for growing teams requiring notarization, and Pro for organizations demanding full control.Read 5 Oct 2026 · wisec.io

Plans and prices

Free Free 3 projects · 1,000 builds/month · 30 days history · 1 PDF certificate/month · Community support Read 5 Oct 2026 · wisec.io
Business €990 a year €990/yr (founder rate); standard rate €5,000/yr from 2027 10 projects · 20,000 builds/month · 1 year history · Email support (48h response) Read 5 Oct 2026 · wisec.io
Pro €2,990 a year €2,990/yr (founder rate); standard rate €15,000/yr from 2027 Unlimited projects and builds · Lifetime archives · Priority support (24h response) Read 5 Oct 2026 · wisec.io
Enterprise Priced on request Custom quote Unlimited projects and builds · On-premise or private cloud deployment · Dedicated 24/7 priority support · Custom billing Read 5 Oct 2026 · wisec.io

Every Wisec plan and price →

Strong points and limits

Strong points

  • Signed build chain includes Ed25519 and SLSA provenance.
  • Generates signed SBOMs and VEX documents.
  • CI policies can block or warn on specified risks.
  • Free plan includes 3 projects and 1,000 builds/month.
  • Enterprise supports on-premise or private cloud.

Limits

  • Business and Pro prices are founder rates.
  • CircleCI and Travis CI support is coming soon.
  • Enterprise pricing is by custom quote.

Who it suits

The Free plan is described for small projects and security exploration; Business is for growing teams needing notarization, and Pro for organizations demanding full control. Enterprise customers can choose on-premise or private-cloud deployment.

Verdict

Wisec combines build evidence, software inventory, and CI policy gates with tiered plans. Its compliance mappings support evidence preparation, not a claim of conformity for CRA or ISO 27001.

Where Specifiction places it

Alternatives to WisecAll alternatives →